Cyber Vulnerability and Penetration Consultant

at  EKXEL IT Services Financial Engineering

Are you looking for a challenging opportunity and want to take advantage of a great job to give new inpulse to your career? This offer is for you. In order to support one of our clients, a large and famous European Public Institution in Luxembourg, we are looking for a Cyber Threat and Vulnerability Consultant.
EKXEL IT Services, is a European leader in IT engineering, high-tech consulting and IT services. We offer a unique blend of expertise and support major European groups with international vocation to implement and succeed in their project to transform and modernize their information systems.

JOB DESCRIPTION:

You will be aggregating, transforming, analysing, interpreting or enriching cyber threat information in order to provide the necessary context for decision-making processes;

Developing and disseminating impactful Cyber Threat Information (CTI) in the face of millions of indicators and alerts and delivering actionable cyber threat information to the client’s senior management and the Cybersecurity Operations Centre (SOC).

• Design the basics of a Threat-informed defence (TID) against vulnerabilities to threats
• Design and implement the use of MITRE ATT&CK to Map and Track Adversary TTPs
• Design and implement steps to aligning the CTI with SOC and IR.
• Contribute to achieving early warning for cyber resilience with an actionable CTI.
• Planning of coordination, training and awareness activities related to the Cyber Threat Landscape (CTL);
• Proposal of practical solutions to improve the procedures and tools supporting the CTL activities.
• Support the Unit with updating core documents, which may include:
• Preparation and maintenance of Monthly and quarterly Cyber Threat Reports;

REQUIREMENTS

• What do you need to succeed in this position?
• A Masters degree and at least one ICT Security professional certification is also required.
• In-depth knowledge of methodologies, processes, tools and frameworks on cybersecurity, including the emerging threats
• 6 years of professional relevant experience, including:
• Operational and technical experience related to cyber-defence deployment/operation of a SOC, CSIRT, Security assessment platform or technical Security infrastructure (PKI, endpoint…); and
• Experience as a team leader or technical leader for major security-related projects in the Cyber Threat Landscape area.
• Proven experience with managing internal and external stakeholders in order to collect the relevant information on emerging cyber threat
• Experience with vulnerability scanning tools and techniques (e.g. Nmap, Nessus, Acunetix, Tripwire, Burp)
• With penetration testing using various tools (including Kali, metasploit)
• Good knowledge of Enterprise Risk Management, Cybersecurity & Cyberthreat Intelligence frameworks and tools: (MISP, TAXII, STIX)
• Good understanding of SIEM methodologies
• Good communication skills, ability to lead multi-lingual meetings and to do presentations to managers, technical staff and also end-users in the context of user awareness activities
• Leadership, autonomy and commitment to increasing maturity
• A fluency in the English language (both oral and written) is expected. French is an asset

Please refer the Job description for details